sunnysideup/ecommerce_orderstep_feedback

Release historycaution

The package has existed for about 9 years and has 17 releases, but it published no releases in the last 12 months. That weakens confidence in ongoing release maintenance despite its established history.

Repo bus factorcaution

All two recent commits came from one contributor, leaving maintenance dependent on a single active person. The repository owner is an individual account, so there is no shown organizational handoff to compensate.

Repo commit activitycaution

The repository recorded two commits in the last three months, showing some current maintenance. The low volume does not offset the lack of registry releases by itself.

Repo toolingcaution

Composer is used for builds, but no security scanning tool was detected. For a small PHP module this is a hygiene gap rather than a severe risk.

Security policycaution

The repository has no security policy. That makes vulnerability reporting and response expectations less transparent for adopters.